1. Introduction
We are committed to protecting your personal data privacy. This policy explains what information we collect, how we use it, and what rights you have in relation to it, in accordance with GDPR and Romanian data protection legislation.
2. Information We Collect
We collect the following categories of personal data:
2.1 Identity Information
- Full name
- Username
- Email address
- Phone number
- Age confirmation (18+)
2.2 Transaction Information
- Ticket purchase history
- Payment methods used (processed through secure intermediaries)
- Winning history
2.3 Technical Information
- IP address
- Browser and device type
- Cookies and similar technologies
- Site browsing behavior
3. How We Use Your Information
We use your personal data for:
- Creating and managing your account
- Processing ticket purchases
- Organizing prize draws
- Contacting winners
- Improving user experience
- Fraud prevention and security
- Marketing communications (only with your consent)
- Complying with legal obligations
4. Legal Basis for Processing
We process your data based on the following legal grounds:
- Consent: For marketing communications and non-essential cookies
- Contract: To provide the services you request
- Legal obligation: To meet legal requirements (e.g., tax)
- Legitimate interests: To improve services and prevent fraud
5. Sharing Your Information
We do not sell your personal data. We may share information with:
- Payment processors: To handle transactions (e.g., Stripe)
- Service providers: Hosting, email, analytics (under confidentiality obligations)
- Authorities: When required by law
- Delivery partners: To deliver prizes to winners
All our partners are contractually required to respect data confidentiality and use it only for specified purposes.
6. Data Security
We implement technical and organizational measures to protect your data:
- Data encryption in transit (SSL/TLS)
- Data encryption at rest
- Secure authentication
- Regular monitoring and auditing
- Restricted access to personal data
- Regular backups
7. Data Retention
We keep your data:
- Active accounts: While you use our services
- Inactive accounts: Up to 3 years from last activity
- Transaction data: Minimum 5 years for tax obligations
- Marketing data: Until you withdraw consent
After these periods, data is deleted or anonymized.
8. Your Rights
Under GDPR, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion (with some exceptions)
- Restriction: Limit processing of your data
- Portability: Receive your data in a structured format
- Objection: Object to processing for marketing
- Withdraw consent: At any time, without affecting prior lawful processing
To exercise these rights, please use our support contact form.
9. Cookies
We use cookies to improve your site experience. For full details on the types of cookies we use and how to manage them, please see our Cookie Policy.
10. International Transfers
Your data is processed mainly within the European Union. If data is transferred outside the EU, we ensure appropriate safeguards under GDPR (e.g., Standard Contractual Clauses).
11. Children
Our services are intended only for persons aged 18 and over. We do not knowingly collect data from minors.
12. Policy Changes
We may update this policy. Material changes will be communicated by email or site notification. The last update date is shown at the top of this page.
13. Contact & Complaints
For questions about this policy or to exercise your rights:
- Use the contact form on our site
- Reach us via support chat
You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP).